Privacy Policy

Last updated: July 30, 2026

Zen Notes ("the App") is operated by Killian Levacher ("we", "us", "our"). This policy explains what data we collect, how we use it, and your rights.

1. Data We Collect

Account data. When you create an account we collect your email address and authentication credentials via Firebase Authentication. If you sign in with Apple, we receive only the identifiers Apple provides (which may include a private relay email).

Notion data. When you connect your Notion workspace, we receive an OAuth access token and the content of the Notion databases you choose to connect (note titles, body content, project names, and database metadata). This data is used solely to display and sync your notes within the App.

App preferences. Settings you configure in the App (appearance mode, delete behaviour, connected database IDs) are stored in your user profile.

Purchase data. Subscription status is managed by RevenueCat, our in-app purchase provider. We receive entitlement status (which plan you are on) but do not see or store your payment details — those are handled entirely by Apple.

2. How We Use Your Data

• To provide and operate the App — syncing, displaying, and appending to your Notion notes
• To authenticate you and maintain your account
• To manage your subscription entitlements
• To store your app preferences

We do not use your data for advertising, profiling, or any purpose unrelated to operating the App.

3. Where Your Data Is Stored

Account data and app preferences are stored in Google Firebase (Cloud Firestore), hosted in the EU/US by Google Cloud. Your Notion content remains in Notion's infrastructure; we cache it locally on your device for offline access and sync purposes only.

Your Notion OAuth access token is stored securely in Firebase and on your device using encrypted storage (expo-secure-store).

4. Data Sharing

We do not sell, rent, or share your personal data with third parties. The only services that process your data are:

• Firebase (Google Cloud) — authentication, database, and hosting
• Notion — your notes content, accessed via their API with your authorisation
• RevenueCat — subscription and entitlement management
• Apple — payment processing for in-app purchases

Each service processes data under its own privacy policy and solely to provide its function to the App.

5. Data Retention

We retain your data for as long as your account is active. Cached Notion content on your device is refreshed on each sync and is not retained beyond app usage.

6. Account Deletion

You can delete your account from the App's Settings screen. Deleting your account permanently removes:

• Your Firebase Auth user record
• All Firestore documents associated with your account (preferences, connected database IDs, cached data)
• Your Notion OAuth token (revoking the App's access to your workspace)

Nothing is deleted from your Notion workspace — your notes and databases remain untouched.

7. Your Rights

Under GDPR and applicable data protection laws, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and all associated data
• Export your data (your notes already live in Notion)
• Object to or restrict processing

To exercise any of these rights, contact us at the address below.

8. Children's Privacy

The App is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date. Continued use of the App after changes constitutes acceptance.

10. Contact

For privacy-related questions or requests:

Killian Levacher
Email: killianlevacher@protonmail.com